cpython forks are spammed with dependabot PRs

[asottile]

BPO	44277
Nosy	@zware, @asottile, @domdfcoding

^{Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.}

Show more details

GitHub fields:

assignee = None
closed_at = <Date 2021-06-02.20:30:58.393>
created_at = <Date 2021-06-01.05:56:02.404>
labels = []
title = 'cpython forks are spammed with dependabot PRs'
updated_at = <Date 2021-06-02.20:30:58.390>
user = 'https://github.com/asottile'

bugs.python.org fields:

activity = <Date 2021-06-02.20:30:58.390>
actor = 'zach.ware'
assignee = 'none'
closed = True
closed_date = <Date 2021-06-02.20:30:58.393>
closer = 'zach.ware'
components = []
creation = <Date 2021-06-01.05:56:02.404>
creator = 'Anthony Sottile'
dependencies = []
files = []
hgrepos = []
issue_num = 44277
keywords = []
message_count = 4.0
messages = ['394842', '394857', '394940', '394945']
nosy_count = 3.0
nosy_names = ['zach.ware', 'Anthony Sottile', 'domdfcoding']
pr_nums = []
priority = 'normal'
resolution = 'third party'
stage = 'resolved'
status = 'closed'
superseder = None
type = None
url = 'https://bugs.python.org/issue44277'
versions = []

[asottile]

for example: https://github.com/asottile/cpython/pull/1

[zware]

This seems like a Dependabot bug; is there anything we can even do about it?

[domdfcoding]

There's an open issue on GitHub, but it hasn't gone anywhere.

dependabot/dependabot-core#2804

[zware]

In that case, closing as third-party.